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IN THE CLAIMS: 

The text of all pending claims (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i k e through . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new) t 
(previously presented), or (not entered), 

1 (Currently Amended) A packet filtering method characterized by storing filtering 
information for use in filtering at a receiving side in ffall an encrypted packet to be sent to the 
receiving side and sending it from a sending side, wherein 

t h e f i lt e ring - informat i on is stored in an Ipv6 extended header added to an Ipv6 header or 
in a flow label region in an Ipv6 header[[J] is used to transmit the filtering information as to 
prevent the filtering information from being encrypted when the packet is a packet in compliance 
with Ipv6, wherein said filtering information b ei ng i mmun e from e n ef yptlon -t ^a ll Qw - p a ok e t 
filtering is used for identifying a specific value showing a VoIP performing a Vo IP communication. 

2, (Currently Amended) A packet filtering method characterized by receiving [[a]]an 
encrypted packet, at a receiving side, from a sending side, detecting filtering information stored 
in that packet, holding predetermined filtering information of the receiving side, comparing 
filtering information of the sending side detected from the packet with the filtering information of 
the receiving side, and, when the two do not match, discarding that packet, wherein th e 4 il t eri ng 
i nformation i s stored in an Ipv6 extended header added to an Ipv6 header or in a flow label 
region in an Ipv6 header[[,]] is used to transmit the filtering information so as to prevent the 
filtering information from being encrypted, when the packet is a packet in compliance with Ipv6, 
wherein said filtering information being imm une from encrypt i on to -a tiow pac ke t fi l t e r i ng jsjjsed 
for identifying a specific value showing a VoIP performing a VoIP communication . 

3. (Currently Amended) Communication equipment at a packet sending side including a 
function unit for achieving a packet filtering, 

said communication equipment characterized by having at least: 
a setting unit for setting free l y determ i ned filtering information, 
a filter key holding unit for holding the filtering information input by the setting unit as a 
filter key, and 
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a filter key storing function unit for receiving as input the held filter key and storing the 
filter key in a header portion of Kali an encrypted packet, wherein 

the filtering info rmation io stor e d in an Ipv6 extended header added to an Ipv6 header or 
in a flow label region in an Ipv6 header[[,]] is used to transmit the filtering information so as to 
prevent the filtering information from being encrypted, when the packet is a packet in compliance 
with lpv6,- wherein said filtering information b ei ng immun e- from -e ncryption to a l low pack e t 
filtering is used for identifying a specific value showing a VoIP performing a VoIP communication . 

4. (Currently Amended) Communication equipment of a packet receiving side including 
a function unit for packet filtering, said communication equipment characterized by being 
provided with; 

a filter key detecting unit for receiving Kali an encrypted packet sent from a sending side 
while storing information as a filter key in a header portion of the packet and detecting the filter 
key from the header portion; and 

a comparing function unit for comparing a filter key of a sending side detected by the 
filter key detecting unit with a filter key of the receiving side held in advance, determining if the 
two do not match, and, when they do not match, discarding the received packet, wherein 

th e f il ter i ng info rm a tion i o stor e d in an Ipv6 extended header added to an Ipv6 header or 
in a flow label region in an Ipv6 heade r is used to transmit the filtering information so as to 
prevent the filtering information from being encrypted , when the packet is a packet in compliance 
with Ipv6, wherein said filtering in fo r m ation being immu ne from encr y p ti on to a l low packet 
fitterim key is used for identifying a specific value showing a VoIP a VoIP performing a VoIP 
communication . 

5, (Previously Presented) Communication equipment as set forth in claim 4, 
characterized in that: 

the equipment is provided with a buffer for temporarily storing a received packet passing 
through the filter key detecting unit and in that the comparing function unit is comprised of: 
a filter key table holding a predetermined plurality of different filter keys, 
a search unit for searching if there is a filter key matching with a filter key detected by the 
filter key detecting unit in the filter key table and when there is none, outputting a discard 
command, and 

a buffer control unit for receiving the discard command and controlling the system so as 
to discard the packet stored in the buffer. 
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6. (Cancelled) 

7. (Cancelled) 

8. (Currently Amended) A packet communication system where a transferred packet is 
filtered, said packet communication system characterized by being provided with: 

a packet transmitting apparatus for storing filtering information for use in filtering at a 
receiving side in a packet to be sent to the receiving side and sending it from a sending side, 

a packet receiving apparatus for receiving [[a]] an encrypted packet, at the receiving side, 
from the sending side through a network between a server and client, detecting filtering 
information stored in the received packet, holding predetermined filtering information of the 
receiving side, comparing filtering information of the sending side detected from the packet with 
the filtering information of the receiving side, and, when the two do not match, discarding that 
packet, and 

an authentication apparatus for receiving user authentication information input from a 
user receiving filtering service, authenticating the user, and assigning and distributing a filter key 
as filtering information corresponding to the user authentication information to the user after the 
authentication, wherein 

the f i lt e ring i nforma ti on is stor e d in an Ipv6 extended header added to an Ipv6 header or 
in a flow label region in an !pv6 heade r is used to transmit the filtering information so as to 
prevent the filtering information from being encrypted , when the packet is a packet in compliance 
with Ipv6, wherein said filtering information b ei ng immune fr o rrH s mcryption to a l low packet 
mmm is used for identifying a specific value showing a VoIP performing VoIP communication . 

9. (Currently Amended) A packet communication system where a filtering service is 
provided for Kali an encrypted packet transferred through a network between a server and a 
client, the packet communication system characterized by being provided with; 

function units used for access from the server or client of the user side to the network, 
that is, a first function unit for receiving user authentication information and authenticating the 
user and 

a second function unit for restricting access by assigning and distributing a filter key as 
filtering information corresponding to the user authentication information to the user after the 
authentication, wherein 
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the filtering i nformation - i^ste red-i n ^ Ipv6 extended header added to an ipv6 header or 
in a flow label region in an Ipv6 heade r is used to transmit the filtering information so as to 
prevent the filtering information from being encrypted , when the packet is a packet in compliance 
with Ipv6, wherein said filtering i nformat i on b eing i m mu^from-e ncryption to a ll ow packet 
ftfterira key is used for identifying a specific value showing a VoIP performing a VoIP 
communication . 

10. (Currently Amended) A packet communication system where a filtering service is 
provided for ffallan encrypted packet transferred through a network between a server and a 
client, the packet communication system characterized by being provided with: 

function units used for access from a user on a network side to the server or client, that 

is, 

a first function unit for receiving user authentication information and authenticating the 
user and 

a second function unit for restricting access by assigning and distributing a filter key as 
filtering information corresponding to the user authentication information to the user after the 
authentication, wherein 



said fi l tering i nform a t i o n - b e fag4mmy ne fr o m e ncrypt i on to a l low pack e t fi l t e r i ng an IPv6 extended 
header added to an IPv6 header or in a flow label region in an IPv6 header is used to transmit 
the filtering information so as to prevent the filtering information from being encrypted, wherein 
said filtering information/filtering key is used for identifying a specific value showing a VoIP 
performing a VoIP communication . 

11. (Cancelled) 

12. (New) A communication equipment as set forth in claim 4, wherein an authentication 
apparatus is further included, the authentication apparatus having: 

a filtering authentication function unit for receiving user authentication information input 
from a user receiving a filtering service and authenticating the user; and 

a filter key providing function unit for assigning and distributing said filter key to be stored 
in a packet corresponding to the user authentication information to the user after the 
authentication at the filtering authentication function unit. 





-when the packet is a packet in compliance with Ipv6, 
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13, (New) A communication equipment as set forth in claim 12, wherein 
said filtering authentication function unit has: 

a user authentication database in which user authentication information is 
registered in advance, and 

a decision unit for determining the veracity of the input user authentication 
information by referring to the user authentication database; and 
said filter key providing function unit has: 

a filter key assigning table holding said filter key assigned in advance 
corresponding to user authentication information, and 

a filter key sending unit for sending a corresponding filter key from the filter key 
assigning table to the user when the veracity is confirmed. 

14. (New) A method, comprising: 

storing information in an extended header of an encrypted packet incompliance with IPv6 
to prevent the information from being encrypted, the information indicating that a communication 
is over VoIP; and 

transmitting, to the receiving side, the encrypted packet with the information to enable 
filtering of the communication. 
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